$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: X7Ws8BGQhDkzBei97urv1MsmKuOZPFHIyxnfKEQP5Ns= Subject key identifier: 6B:67:4D:16:82:AF:79:CF:09:F7:EF:15:CF:24:E7:7A:25:6C:58:78 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0BAB Signing time: Tue 24 Mar 2026 18:48:50 +0000 Manifest this update: Tue 24 Mar 2026 18:48:49 +0000 Manifest next update: Tue 31 Mar 2026 18:48:49 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: T0ShIq34yCQBMFOiiti8uCFt4mlr2q6kWHzgz0wvEIM=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: 4eqOlSLRPKjeL1TFzyh0NXLTAo0Vu3W9omx4TqqCWjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3008 (0xbc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Mar 24 18:48:49 2026 GMT Not After : Mar 31 18:48:49 2026 GMT Subject: CN=69c2dc92-f886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b6:fd:31:f7:6e:c9:c2:6c:c1:56:79:ca:fa: 58:4a:72:8c:82:23:10:ea:ef:49:77:c8:cc:9a:95: 96:5a:14:8c:03:d7:90:4f:30:70:a3:70:be:45:f3: e7:77:02:2b:57:48:eb:d2:4d:9d:69:e7:5e:1b:c0: d4:49:cb:6c:65:22:fc:de:34:4f:c9:25:ad:9f:f8: 9e:d6:db:f3:c6:55:f1:f7:71:9c:04:81:f2:45:83: 49:a6:52:15:2f:1a:63:90:ec:34:1c:e0:e6:be:9c: fc:23:8d:37:eb:a3:66:30:82:ff:71:2d:2c:6b:39: a9:4a:b1:9f:62:13:3e:ae:20:b7:a0:39:b6:fa:ef: 2d:4a:4e:fb:67:25:c2:05:4c:c6:9d:40:3c:12:75: af:15:18:e9:67:84:89:54:d1:4c:ca:62:f2:6f:3d: ab:f6:ec:08:e4:4c:35:21:43:39:85:f5:9f:45:dc: 1f:4e:84:bb:4f:db:86:b2:27:18:0b:07:ab:54:3a: 1a:1a:da:87:93:b8:61:8c:25:eb:45:41:b4:c1:66: db:61:d2:42:bd:7d:88:51:23:ac:86:40:26:69:b3: c8:f4:40:d0:eb:10:fd:e6:7f:42:8f:38:0e:a0:bb: 91:7d:d8:96:9f:14:c3:76:c2:07:e8:1e:63:ab:ec: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:67:4D:16:82:AF:79:CF:09:F7:EF:15:CF:24:E7:7A:25:6C:58:78 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:32:b3:90:6e:dd:d8:c2:4b:0c:a3:49:78:0b:51:33:c6:51: bf:48:17:2d:2c:3d:1b:c8:68:3e:bc:6f:89:9d:2b:f1:8d:04: 68:bc:e8:4a:61:6e:41:d9:99:f1:ea:21:44:83:f6:ed:a5:56: 2e:49:99:fe:1e:e2:76:6d:18:a6:d5:4f:72:b5:1a:cc:e7:0d: f8:cf:09:5b:42:92:08:ca:c2:ba:e5:cf:a0:7e:d2:8a:7d:16: 7a:d3:24:8e:5f:d6:b1:cb:99:bd:4b:26:fd:1c:ab:e1:e7:5a: 7b:4a:b1:0b:fd:9a:2a:22:a0:83:23:b5:d4:ea:4f:e4:80:9b: 9e:98:33:92:28:f7:62:cd:e8:e0:98:7b:90:70:d0:a1:6e:8d: 03:62:35:75:7f:12:cc:bc:e7:52:dc:ff:42:53:64:3e:6b:82: 35:fb:4c:9b:e4:a4:a7:a0:f1:39:19:83:de:d5:1b:7b:18:bc: 8c:ec:39:2c:d0:c4:a6:56:19:be:70:83:8d:1f:19:e8:fe:11: e4:03:57:7c:b4:25:0c:d6:c4:41:be:16:29:b0:9d:f4:92:fa: 4e:b4:cd:8c:bc:e4:30:93:ae:b7:f6:fe:24:f8:5c:f6:cb:9b: c4:e3:3d:15:46:4c:9c:df:ea:2d:de:bf:a7:b8:cb:e9:ad:ad: c1:df:74:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjYwMzI0MTg0ODQ5WhcNMjYwMzMxMTg0ODQ5WjAYMRYwFAYD VQQDEw02OWMyZGM5Mi1mODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rb9MfduycJswVZ5yvpYSnKMgiMQ6u9Jd8jMmpWWWhSMA9eQTzBwo3C+RfPn dwIrV0jr0k2daedeG8DUSctsZSL83jRPySWtn/ie1tvzxlXx93GcBIHyRYNJplIV LxpjkOw0HODmvpz8I40366NmMIL/cS0sazmpSrGfYhM+riC3oDm2+u8tSk77ZyXC BUzGnUA8EnWvFRjpZ4SJVNFMymLybz2r9uwI5Ew1IUM5hfWfRdwfToS7T9uGsicY CwerVDoaGtqHk7hhjCXrRUG0wWbbYdJCvX2IUSOshkAmabPI9EDQ6xD95n9CjzgO oLuRfdiWnxTDdsIH6B5jq+zFFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtnTRaC r3nPCffvFc8k53olbFh4MB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOjKzkG7d2MJLDKNJeAtRM8ZRv0gXLSw9G8hoPrxviZ0r8Y0EaLzoSmFuQdmZ 8eohRIP27aVWLkmZ/h7idm0YptVPcrUazOcN+M8JW0KSCMrCuuXPoH7Sin0WetMk jl/WscuZvUsm/Ryr4edae0qxC/2aKiKggyO11OpP5ICbnpgzkij3Ys3o4Jh7kHDQ oW6NA2I1dX8SzLznUtz/QlNkPmuCNftMm+Skp6DxORmD3tUbexi8jOw5LNDEplYZ vnCDjR8Z6P4R5ANXfLQlDNbEQb4WKbCd9JL6TrTNjLzkMJOut/b+JPhc9subxOM9 FUZMnN/qLd6/p7jL6a2twd90tg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:32 2026 by rpki-client